Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yedNszpCcjNC2x0adVoK23DAZow.roa
File: yedNszpCcjNC2x0adVoK23DAZow.roa (raw, json)
Hash identifier: r3z4N0o04+YNqQb/bxWBL5AhRumy4RQwlM13Xx6XsjE=
Subject key identifier: C9:E7:4D:B3:3A:42:72:33:42:DB:1D:1A:75:5A:0A:DB:70:C0:66:8C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019087A5F57037518F9E0C674AF8126DA58D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yedNszpCcjNC2x0adVoK23DAZow.roa
Signing time: Sat 06 Jul 2024 10:45:18 +0000
ROA not before: Sat 06 Jul 2024 10:45:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 62.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 10:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:87:a5:f5:70:37:51:8f:9e:0c:67:4a:f8:12:6d:a5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 6 10:45:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9e74db33a42723342db1d1a755a0adb70c0668c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:8e:8c:36:88:15:c7:b9:d9:52:cd:0c:62:
91:13:bc:ad:43:8a:e4:c7:3c:3a:a9:fd:24:28:a5:
b2:ae:13:b2:66:58:5d:dd:dd:73:37:5e:6c:86:e3:
a0:10:d4:22:8f:12:85:2c:d9:ac:6e:86:40:f0:c9:
b9:a7:05:e4:23:6d:7d:63:cc:44:37:52:87:a8:4d:
df:e8:3d:dc:86:6b:83:57:62:62:cb:33:96:2b:be:
38:c6:ed:20:5f:09:fe:52:3b:f2:55:09:0f:2e:74:
48:af:6c:74:be:cf:71:17:38:d1:13:20:d1:f6:25:
73:a6:ca:5e:27:3e:5e:ae:9f:19:48:e8:f3:5a:a9:
a5:7f:ec:a2:5c:97:ae:d5:05:72:a2:52:f6:64:00:
25:00:09:47:2f:fd:30:27:c2:67:64:07:e1:d4:70:
2a:7a:9b:6b:f5:26:0d:89:f0:6d:c0:fe:e0:0d:b1:
47:31:67:1e:7b:d2:2e:56:7e:04:9d:17:d9:ce:09:
f9:21:37:a0:ab:ef:b2:1a:28:df:46:1e:64:5d:cd:
a7:54:81:a1:8c:83:ce:de:86:1d:dc:36:cd:71:ac:
1a:07:f4:47:2a:9f:37:31:48:12:8e:dd:9f:de:ca:
d6:fc:c0:03:0c:6f:17:6e:63:86:2f:86:dd:56:b8:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:4D:B3:3A:42:72:33:42:DB:1D:1A:75:5A:0A:DB:70:C0:66:8C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/yedNszpCcjNC2x0adVoK23DAZow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.192.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:b9:1b:b2:57:12:a6:ca:a0:50:45:f5:39:7b:7a:e6:f2:6d:
3c:bc:24:ba:3d:fb:eb:64:4c:79:61:8f:11:67:c8:57:09:32:
33:d5:f3:b9:9e:1f:84:82:ad:74:c8:fb:5e:8e:b0:3e:72:3a:
55:96:e7:a3:59:40:93:de:3a:02:f8:98:bd:77:d0:99:7a:97:
d1:96:ab:ae:ae:b4:1d:16:66:f9:97:3c:ac:f6:6d:5c:a6:10:
20:63:be:c9:89:67:9e:2b:32:73:97:9f:96:3b:ee:2e:6e:48:
ab:9f:a8:85:e4:f7:de:ff:a5:47:6e:1b:95:91:12:12:34:e7:
85:33:16:30:0f:b6:93:6e:5e:6d:77:75:3f:b9:4d:7f:d7:fb:
fc:94:38:17:8c:3f:dd:bc:ef:91:c6:8e:55:ea:ca:45:42:5f:
b2:7a:7b:1a:57:bf:92:05:ac:94:d9:0f:1c:6b:b1:34:da:2d:
a1:d4:41:a4:a6:70:a4:e8:ac:94:c1:8b:e1:89:95:22:29:1c:
c9:12:30:8b:02:d2:43:83:e7:d7:76:3c:fb:bc:e1:c6:82:0f:
b5:8b:09:ff:8a:68:66:04:2a:47:06:69:07:95:6d:dc:42:ce:
25:bb:c1:04:82:6b:b1:35:8e:df:06:93:2c:19:db:c6:86:35:
00:f6:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 12:31:32 2024 by rpki-client on console-ams.rpki-client.org